Disable TLS 1.0 and 1.1

Yes. That is the way.

I have confirmed this using sslyze, ssllabs and mozilla observatory. Versions 2.0 through 2.2

You may know, but when subsequent re-scanning use the clear cache link from the results page.

I like to use sslyze first as it is faster than the external tools.